JiHong88

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

JiHong88 records in CISA KEV

No JiHong88 vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-42328 CVE-2026-59167 · GHSA-6rf4-v2fh-m6p4

SunEditor: Critical XSS vulnerability - sanitizer bypass

HIGH 82

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00499 Published 2026-09-23 Fixed in 2.47.11 CWE-79

TI-2026-39439 CVE-2026-54606 · GHSA-w93q-cq9w-58p7

SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed

HIGH 72

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00581 Published 2026-08-26 Fixed in 3.1.4 CWE-79

TI-2026-86759 CVE-2026-124422 · GHSA-fvm2-c629-pcjf

Stored cross-site scripting in SunEditor via html.clean()

LOW 39

SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds iframes from data-se-iframe-holder-attrs JSON without filtering srcdoc or uppercase SRC keys.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS — Published 2026-11-08 Fixed in 3.4.0 CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0